Remove dragon (fixes #267)

docs/servers.md

@@ -44,11 +44,6 @@
      the hosts vars and re-used the archusers role. Users
      in the phrik group are allowed to restar the irc bot.
 
-## dragon
-
-### Services
-  - build server
-
 ## state.archlinux.org
 
 ### Services

docs/ssh-hostkeys.txt

@@ -97,17 +97,6 @@
 256 MD5:7b:38:67:01:59:c8:a7:b3:66:ec:78:df:ec:dd:30:72 root@build.archlinux.org (ED25519)
 3072 MD5:f2:6a:ba:b0:53:9b:d4:73:83:21:d6:76:0f:70:71:72 root@build.archlinux.org (RSA)
 
-# dragon.archlinux.org
-1024 SHA256:B6Toehif0eXoxWA9Z67Vd0KdK1fjdouISxKLqneSCRs root@dragon (DSA)
-256 SHA256:fkrWuKgabvnJhqnFFzHeHffh2FbQVq69a0jlbE/93H8 root@dragon (ECDSA)
-256 SHA256:ueI8ETlculq7g5IdCxbAcY0NiwfL3/NEgPACCD0BDFY root@dragon (ED25519)
-2048 SHA256:KBk/rZEwB5nRtHzwgPyJJjUj8/kttrWAzftqWxhJfT0 root@dragon (RSA)
-
-1024 MD5:6d:99:86:ae:f0:78:de:1b:3e:e3:d4:0b:e4:a6:4d:3e root@dragon (DSA)
-256 MD5:af:94:59:fb:c5:19:90:34:70:e7:6d:62:dd:e2:f5:44 root@dragon (ECDSA)
-256 MD5:54:23:82:0d:e6:da:6c:d7:09:f1:f0:0f:49:5a:64:04 root@dragon (ED25519)
-2048 MD5:e1:e6:4f:72:31:a3:9a:2c:af:e0:0f:53:43:27:6b:df root@dragon (RSA)
-
 # europe.mirror.pkgbuild.com
 1024 SHA256:Oq3eikchfo8Wt6AUzWAiU1mDR24rXudJR/zqKBFnrMo root@europe.mirror.pkgbuild.com (DSA)
 256 SHA256:3S0HuO72jHUUrPM8BjfcjsB0FNXkubxovc7Sm5jZBjc root@europe.mirror.pkgbuild.com (ECDSA)

docs/ssh-known_hosts.txt

@@ -43,11 +43,6 @@ build.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
 build.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmifn4KBLX24gBH4RwdBzYwLCSyVM1UbjGWxdtvoN1k
 build.archlinux.org ssh-rsa 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
 
-# dragon.archlinux.org
-dragon.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLKq4R12HOq/u052UI6ztrjN+Vfrc4mbh7uf4HixiWHSDOjzJNrfmKjosqgEyFpDX5RLlHAt+KF4qy7gSQ3Dkpk=
-dragon.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnUsMuS0hc7ATduUudV93QOanFoyyCfj+kKjeD8RTxF
-dragon.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcXC5AWSgbG+ZP8vsaK4rpKugPrm0i7K4RADIYF2KX1aoaHvMBInwpY+qb0eRcIvWy2AEeOmpXrsQGrcUxMqsMjWnsuqWvlRdHxWJZ01TmL8Ui8xtyQF372yEjxbMtn1Yg120jdv1vyZTviWtL66ihZN3n4gIjY9lXJcE4hsGh+llIkiAqsrMUDt0lKaw/AeiiLcwbN9liD55U1SUf+gAmALu2Qp5IgUM1OLwGuISL8DtYkbRjeryGgB58/m50/Icg28IMqJ8+Dx8Pr2dJr3RLC6AMyiT/rw/5qTVw1KRiUWzeUdLcphTsMTC021XAXp1JUwnbWyemX8SdjZ+SJ2uL
-
 # europe.mirror.pkgbuild.com
 europe.mirror.pkgbuild.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBASkHNbJZvfME9OAFLZpxoVMt7JfKhN8/VpH6JPRD8eRXfXc2Wt0YOZQGzJsrUNoFchEUUGeNxs7vmj8nwtfqGI=
 europe.mirror.pkgbuild.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6sVYSrTIVj+xwyC5uJdFVU+X50tAIDEndsnGta75C7

group_vars/all/archusers.yml

@@ -215,7 +215,6 @@ arch_users:
       - name: foutrelis_buildhost.pub
         hosts:
           - build.archlinux.org
-          - dragon.archlinux.org
     groups:
       - dev
       - tu

host_vars/dragon.archlinux.org

----
-hostname: "dragon"
-network_interface: "enp98s0f0"
-ipv4_address: "195.201.167.210"
-ipv4_netmask: "/26"
-ipv6_address: "2a01:4f8:13a:102a::2"
-ipv6_netmask: "/128"
-ipv4_gateway: "195.201.167.193"
-ipv6_gateway: "fe80::1"
-filesystem: btrfs
-raid_level: raid0
-system_disks:
-  - /dev/nvme0n1
-  - /dev/nvme1n1
-
-archbuild_fs: 'btrfs'

hosts

 [hetzner]
 luna.archlinux.org
-dragon.archlinux.org
 secure-runner1.archlinux.org
 gemini.archlinux.org
 
@@ -83,7 +82,6 @@ security.archlinux.org
 man.archlinux.org
 
 [buildservers]
-dragon.archlinux.org
 build.archlinux.org
 
 [gitlab_runners]
@@ -127,7 +125,6 @@ homedir.archlinux.org
 mail.archlinux.org
 matrix.archlinux.org
 bbs.archlinux.org
-dragon.archlinux.org
 build.archlinux.org
 bugs.archlinux.org
 gemini.archlinux.org

playbooks/dragon.yml

----
-
-- name: setup dragon
-  hosts: dragon.archlinux.org
-  remote_user: root
-  roles:
-    - { role: common }
-    - { role: tools }
-    - { role: sshd }
-    - { role: unbound }
-    - { role: root_ssh }
-    - { role: archusers }
-    - { role: sudo, tags: ['archusers'] }
-    - { role: syncrepo }
-    - { role: archbuild }
-    - { role: fail2ban }
-    - { role: prometheus_exporters }

roles/prometheus/files/node.rules.yml

@@ -4,7 +4,7 @@ groups:
   rules:
 
   - alert: HostHighCpuLoad
-    expr: 100 - (avg by(instance) (irate(node_cpu_seconds_total{mode="idle",instance!~"dragon.archlinux.org",instance!~"repro1.pkgbuild.com",instance!~"repro2.pkgbuild.com"}[5m])) * 100) > 80
+    expr: 100 - (avg by(instance) (irate(node_cpu_seconds_total{mode="idle",instance!~"build.archlinux.org",instance!~"repro1.pkgbuild.com",instance!~"repro2.pkgbuild.com"}[5m])) * 100) > 80
     for: 5m
     labels:
       severity: warning

tf-stage1/archlinux.tf

@@ -218,10 +218,6 @@ locals {
       ipv4_address = "5.9.250.164"
       ipv6_address = "2a01:4f8:160:3033::2"
     }
-    dragon = {
-      ipv4_address = "195.201.167.210"
-      ipv6_address = "2a01:4f8:13a:102a::2"
-    }
     build = {
       ipv4_address = "135.181.138.48"
       ipv6_address = "2a01:4f9:3a:120f::2"